tmatens/compose-lint

A per-rule 'reason:' without 'enabled: false' is silently inert 17 days ago

bug good first issue

49

Security-focused linter for Docker Compose files. Catches dangerous misconfigurations before they reach production. Grounded in OWASP and CIS Docker Benchmark.

Python

#cis-benchmark#container-security#devops#devsecops#docker#docker-compose#github-actions#hardening#iac-security#linter#owasp#pre-commit#python#sarif#security#security-scanner#security-tools#static-analysis#yaml

--explain reports a format error for a correctly-formatted rule id 17 days ago

bug good first issue

tmatens/compose-lint

49

Security-focused linter for Docker Compose files. Catches dangerous misconfigurations before they reach production. Grounded in OWASP and CIS Docker Benchmark.

Python

#cis-benchmark#container-security#devops#devsecops#docker#docker-compose#github-actions#hardening#iac-security#linter#owasp#pre-commit#python#sarif#security#security-scanner#security-tools#static-analysis#yaml

An empty-but-present 'rules:' or 'exclude_services:' is a fatal config error, while '{}' is fine 30 days ago

bug good first issue

tmatens/compose-lint

49

Security-focused linter for Docker Compose files. Catches dangerous misconfigurations before they reach production. Grounded in OWASP and CIS Docker Benchmark.

Python

#cis-benchmark#container-security#devops#devsecops#docker#docker-compose#github-actions#hardening#iac-security#linter#owasp#pre-commit#python#sarif#security#security-scanner#security-tools#static-analysis#yaml

CL-0020: quantity-knob exemption misses work factors, retry counters and lengths about 1 month ago

bug good first issue

tmatens/compose-lint

49

Security-focused linter for Docker Compose files. Catches dangerous misconfigurations before they reach production. Grounded in OWASP and CIS Docker Benchmark.

Python

#cis-benchmark#container-security#devops#devsecops#docker#docker-compose#github-actions#hardening#iac-security#linter#owasp#pre-commit#python#sarif#security#security-scanner#security-tools#static-analysis#yaml

A fragment compose.override.yml skips the whole project and reports PASS, dropping a CRITICAL about 1 month ago

bug good first issue

tmatens/compose-lint

49

Security-focused linter for Docker Compose files. Catches dangerous misconfigurations before they reach production. Grounded in OWASP and CIS Docker Benchmark.

Python

#cis-benchmark#container-security#devops#devsecops#docker#docker-compose#github-actions#hardening#iac-security#linter#owasp#pre-commit#python#sarif#security#security-scanner#security-tools#static-analysis#yaml

Parse error in an auto-merged compose.override.yml is reported under the base file's name about 1 month ago

bug good first issue

tmatens/compose-lint

49

Security-focused linter for Docker Compose files. Catches dangerous misconfigurations before they reach production. Grounded in OWASP and CIS Docker Benchmark.

Python

#cis-benchmark#container-security#devops#devsecops#docker#docker-compose#github-actions#hardening#iac-security#linter#owasp#pre-commit#python#sarif#security#security-scanner#security-tools#static-analysis#yaml

Open Issues Need Help